REACH for Healthcare

What is REACH?

REACH — Registration, Evaluation, Authorisation and Restriction of Chemicals — is a comprehensive European Union regulation (EC No 1907/2006) that governs the production, importation, and use of chemical substances within the EU and European Economic Area. Enacted in 2007 and administered by the European Chemicals Agency (ECHA), REACH places the burden of proof on manufacturers and importers to demonstrate that the chemical substances they handle are safe for human health and the environment. With over 20,000 substances registered to date, REACH represents one of the most far-reaching chemical safety frameworks in the world.

REACH and the Healthcare Industry

The healthcare sector interacts with chemical substances at virtually every level of its operations, making REACH compliance not only a legal obligation but a patient safety imperative. Pharmaceutical manufacturers, medical device producers, hospital supply chains, and diagnostic equipment companies all handle substances that fall within the scope of REACH. Unlike the pharmaceutical sector's own regulatory frameworks — such as EMA guidelines — REACH addresses the chemical composition of materials used in production processes, packaging components, cleaning agents, sterilisation substances, and the raw materials incorporated into finished healthcare products.

Consider a manufacturer of silicone-based medical tubing: the silicone compounds, plasticisers, and any processing aids used in production must be registered under REACH if they are imported or manufactured in quantities exceeding one tonne per year. Similarly, a hospital network procuring latex examination gloves must verify with its suppliers that the latex, accelerators, and powder additives comply with REACH restrictions — particularly regarding substances of very high concern (SVHCs) such as certain phthalates, which are used as plasticisers in PVC medical devices and are subject to authorisation requirements. Diagnostic laboratories using solvents, reagents, and staining chemicals must maintain up-to-date Safety Data Sheets (SDS) for each substance in use. In each of these cases, failure to comply with REACH can result in product recalls, regulatory fines, market access restrictions, and — most critically — risks to patient welfare.

The healthcare industry also faces particular scrutiny because many SVHCs identified by ECHA have endocrine-disrupting or carcinogenic properties. Given that patients are often in a vulnerable physiological state, the acceptable exposure thresholds for such substances in healthcare settings are a matter of active regulatory discussion, and healthcare companies must stay informed as ECHA's candidate list of SVHCs is updated twice yearly.

Key Requirements

• Registration of chemical substances: Any substance manufactured in or imported into the EU in quantities of one tonne or more per year must be registered with ECHA. Healthcare manufacturers producing active pharmaceutical ingredients (APIs) or chemical intermediates at scale must submit comprehensive registration dossiers that include hazard data, exposure scenarios, and risk management measures.
• Safety Data Sheet (SDS) management: Suppliers of chemical substances or mixtures classified as hazardous are required to provide a compliant SDS to downstream users. Healthcare procurement teams must collect, store, and review SDS documents for all chemicals in use, including disinfectants, sterilants, reagents, and adhesives used in device assembly.
• Substances of Very High Concern (SVHC) obligations: If an article — such as a medical device or packaging component — contains an SVHC on ECHA's candidate list at a concentration above 0.1% by weight, suppliers are required to inform recipients and, upon request from consumers, communicate this information. Healthcare companies that supply articles to other businesses or directly to patients must have systems in place to identify and disclose SVHC content.
• Authorisation for restricted substances: Certain SVHCs may only be used after obtaining specific authorisation from the European Commission. Healthcare companies using substances such as chromium trioxide in surface treatments for surgical instruments, or specific phthalates in PVC medical tubing, must apply for authorisation or transition to safer alternatives within the sunset date specified by ECHA.
• Restriction compliance: Annex XVII of REACH lists substances whose manufacture, use, or placing on the market is restricted. Healthcare companies must screen their product formulations and manufacturing processes against current restrictions, which include limits on certain heavy metals in medical device components and restrictions on specific aromatic amines used in dyes for textiles that may contact skin.
• Downstream user obligations: Even companies that do not manufacture or import chemicals themselves — such as hospitals and clinical laboratories — have downstream user obligations. These include using substances only within the conditions described in the supplier's SDS and reporting any use not covered by existing exposure scenarios to the relevant authority or preparing a Chemical Safety Report.
• Supply chain communication: REACH requires transparent communication throughout the supply chain. Healthcare manufacturers must request compliance information from their raw material and component suppliers and pass relevant hazard and safe use information to their own customers.

Implementation Steps for Healthcare Companies

1. Conduct a full chemical inventory audit. Map every chemical substance, mixture, and article used across your operations — from raw material intake and manufacturing processes to cleaning protocols, packaging lines, and laboratory consumables. Assign CAS numbers where possible and record quantities used annually per substance to determine registration thresholds.
2. Identify your role in the supply chain. Determine whether your organisation acts as a manufacturer, importer, downstream user, or distributor under REACH definitions. A company that synthesises a chemical intermediate is a manufacturer; a company that purchases a finished reagent from a non-EU supplier is an importer. Your obligations differ significantly depending on your role, so legal classification is a necessary first step.
3. Screen your substance inventory against the SVHC candidate list. Download the current ECHA candidate list and compare it against your chemical inventory. Pay particular attention to phthalates in PVC components, bisphenol A in packaging materials, and certain chromium compounds in coatings. Update this screening exercise every six months when ECHA publishes candidate list revisions.
4. Collect and validate Safety Data Sheets from all suppliers. Request current SDS documents (compliant with the EU SDS format under REACH Annex II) from every chemical and mixture supplier. Verify that each SDS includes the required 16 sections, current hazard classifications aligned with CLP regulation, and relevant exposure scenarios for your intended use. Reject and escalate non-compliant SDS documents.
5. Register substances where required or verify pre-registration status. If your organisation manufactures or imports substances above the one tonne per year threshold, confirm that they have been registered with ECHA or join a Substance Information Exchange Forum (SIEF) to co-register. For most healthcare companies that purchase substances domestically, confirm registration compliance with your EU supplier by requesting ECHA registration numbers.
6. Assess authorisation and restriction requirements. For each substance on your inventory that appears in REACH Annex XIV (authorisation list) or Annex XVII (restriction list), assess whether your specific use is covered by an existing authorisation or whether a restriction exemption applies. Medical devices and pharmaceutical products may be subject to specific derogations — consult legal counsel familiar with both REACH and the relevant sectoral legislation (MDR, EU Pharmacopoeia) to determine the correct compliance pathway.
7. Establish a supplier compliance programme. Issue REACH compliance questionnaires to all direct material suppliers. Require contractual commitments to notify you of any changes to substance compositions, new SVHC listings affecting supplied articles, or changes to authorisation status. Incorporate REACH compliance clauses into supplier contracts and conduct periodic audits.
8. Train relevant staff and assign a REACH compliance owner. Regulatory affairs, procurement, quality assurance, and production teams all interact with REACH obligations. Deliver targeted training to each function and designate a senior compliance officer responsible for monitoring regulatory updates, maintaining the chemical inventory, and coordinating with ECHA and national competent authorities as needed.

Frequently Asked Questions

Does REACH apply to finished pharmaceutical products and medical devices?

Finished pharmaceutical products authorised under EU pharmaceutical legislation are largely exempt from REACH registration requirements, as they are regulated under a separate framework. However, REACH does apply to the chemical substances and intermediates used in the manufacturing process itself, as well as to excipients and packaging materials that are not part of the pharmaceutical formulation. Medical devices are not exempt from REACH; the substances and materials incorporated into devices — including plastics, metals, coatings, and adhesives — must comply with REACH registration, SVHC communication, and restriction obligations. Healthcare companies must therefore maintain parallel compliance programmes covering both REACH and the EU Medical Device Regulation (MDR 2017/745).

What are the consequences of non-compliance with REACH for a healthcare company?

Non-compliance with REACH can result in enforcement action by national competent authorities, including product bans, mandatory recalls, and financial penalties that vary by member state. In Germany, for example, fines for REACH violations can reach up to EUR 100,000 per infringement. Beyond direct regulatory penalties, healthcare companies face significant commercial risk: major healthcare purchasers and hospital procurement frameworks increasingly require documented REACH compliance from their suppliers, and non-compliance can lead to exclusion from public tenders. There is also potential civil liability if a patient suffers harm attributable to a restricted or undisclosed substance in a healthcare product.

How often is the SVHC candidate list updated, and how should healthcare companies track changes?

ECHA updates the SVHC candidate list typically twice per year, usually in January and July, following the conclusion of public consultation and Member State Committee review processes. Healthcare compliance teams should subscribe to ECHA's free email notification service for candidate list updates, integrate the latest candidate list into their annual substance screening cycle, and configure alerts in chemical management software to flag newly listed SVHCs against the existing inventory. Given that each update may add ten to thirty new substances, a reactive rather than proactive approach carries significant compliance risk.

Are small and medium-sized healthcare companies subject to the same REACH obligations as large manufacturers?

REACH obligations are determined by the role a company plays in the supply chain and the volumes of substances handled, not by company size. A small medical device manufacturer that imports a chemical component from a non-EU supplier in quantities above one tonne per year has the same registration obligation as a multinational corporation in the same position. ECHA does provide fee reductions and simplified registration pathways for SMEs, and registration fees are scaled according to company size and tonnage band. However, SMEs must still meet the same substantive requirements for hazard data, SDS communication, and SVHC disclosure. ECHA offers dedicated SME support resources, including helpdesk services and published guidance documents tailored to smaller organisations.

Summary

REACH compliance is a non-negotiable operational requirement for healthcare companies operating in or supplying to the European market, touching every stage of the product lifecycle from raw material sourcing to end-user delivery. Given the direct link between chemical safety and patient welfare, healthcare organisations that treat REACH not merely as a legal checkbox but as a quality and safety management discipline are better positioned to protect patients, retain market access, and build durable supply chain relationships. Begin your compliance journey today by conducting a thorough chemical inventory audit and engaging your supply chain — the regulatory landscape will only grow more demanding, and early action is always less costly than remediation.